Page 28 - Data and Digital Technology Strategy 2024-2026
P. 28
STRATEGIC PRINCIPLES STRATEGIES AND ACTIONS
SECURITY
PRINCIPLES 飩� The RVC will proactively detect potential
飩� Appropriate governance will be used 飩� RVC data will be stored and transmitted or actual malicious activity affecting the
with effective controls to prevent
to secure the RVC新月直播檚 networks and unauthorised access, modi铿� cation, or security of its networks and systems.
information systems. deletion. 飩� The RVC will de铿� ne and test its incident
飩� A risk-based approach will be used 飩� The RVC will limit opportunities to management processes to ensure
to identify, assess, and understand all continuity of essential functions in the
compromise networks and systems with
security risks. event of failure.
robust, reliable, and protective security
飩� Asset management will be used to measures. 飩� When incidents occur, the RVC takes
manage everything required to secure the steps to understand root causes and
飩� The RVC will build networks and systems
RVC新月直播檚 essential operations and functions. learn lessons to ensure similar incidents
resilient to cyber-attack and system
飩� The RVC will manage security risks failure using multiple layers using the do not reoccur by using principles of
to essential functions resulting from principle of defence in depth. continuous feedback and improvement.
dependencies on external suppliers and 飩� The effectiveness of the RVC新月直播檚 cyber
飩� All staff and students will have
third-party services in its supply chain. security measures will be externally
appropriate awareness and training to
飩� The RVC will de铿� ne, implement, be secure custodians of RVC新月直播檚 data and veri铿� ed and accredited.
communicate, and enforce policies and information systems.
procedures to secure RVC systems and
飩� The RVC will continually monitor
data. its networks and systems to detect
飩� The RVC will understand, document, potential security problems and track the
and manage access to networks and effectiveness of existing measures.
information systems to ensure all access
is veri铿� ed, authenticated, and authorised,
using the principle of least privilege.
28 28
